CVE-2024-23346

CVE-2024-23346 This PoC is based on the report/findings of William Khem-Marquez and Matthew Horton: https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f Usage: python3 CVE-2024-23346.py -t targetURL -u username -p password -l localhost -P localport -X -P and -X are...

CVE-2024-23346-exploit

CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

PYSEC-2026-909 pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

shakenbreak (22.11.7) potentially affected by CVE-2022-42964 via pymatgen (2022.10.22)

pymatgen PYPI version 2022.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - shakenbreak 22.11.7 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

dftfit (>=0.3.2, <=0.4.10), pymatgen-lammps (>=0.4.0, <=0.4.4) potentially affected by CVE-2022-42964 via pymatgen (2017.7.4)

pymatgen PYPI version 2017.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - dftfit =0.3.2, =0.4.0, =0.4.4 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

abipy (0.3.0) potentially affected by CVE-2022-42964 via pymatgen (2018.2.13)

pymatgen PYPI version 2018.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - abipy 0.3.0 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

abipy (0.5.0) potentially affected by CVE-2022-42964 via pymatgen (2018.6.11)

pymatgen PYPI version 2018.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - abipy 0.5.0 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

pyerepfit (0.2.0.dev4) potentially affected by CVE-2022-42964 via pymatgen (2018.9.19)

pymatgen PYPI version 2018.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - pyerepfit 0.2.0.dev4 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

fplore (0.1.0a0) potentially affected by CVE-2022-42964 via pymatgen (2018.9.30)

pymatgen PYPI version 2018.9.30 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - fplore 0.1.0a0 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

aiida-zeopp (>=1.0.1, <=1.0.2) potentially affected by CVE-2022-42964 via pymatgen (2018.12.12)

pymatgen PYPI version 2018.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - aiida-zeopp =1.0.1, =1.0.2 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

pyxtal (>=0.0.1, <=0.0.2) potentially affected by CVE-2022-42964 via pymatgen (2019.4.11)

pymatgen PYPI version 2019.4.11 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - pyxtal =0.0.1, =0.0.2 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

vise (0.1.0) potentially affected by CVE-2022-42964 via pymatgen (2019.11.11)

pymatgen PYPI version 2019.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - vise 0.1.0 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

automatminer (1.0.3.20200727), pydefect (>=0.0.1, <=0.1.0) +1 more potentially affected by CVE-2022-42964 via pymatgen (2020.1.28)

pymatgen PYPI version 2020.1.28 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - automatminer 1.0.3.20200727 - pydefect =0.0.1, =0.1.0.dev2, =0.1.13 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

abinitostudio (>=1.0.1, <=1.0.8) potentially affected by CVE-2022-42964 via pymatgen (2020.4.2)

pymatgen PYPI version 2020.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - abinitostudio =1.0.1, =1.0.8 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

express-py (>=2020.10.19, <=2022.11.15.post1) potentially affected by CVE-2022-42964 via pymatgen (2020.4.29)

pymatgen PYPI version 2020.4.29 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - express-py =2020.10.19, =2022.11.15.post1 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

modnet (0.1.13) potentially affected by CVE-2022-42964 via pymatgen (2020.8.13)

pymatgen PYPI version 2020.8.13 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - modnet 0.1.13 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

robocrys (0.2.5) potentially affected by CVE-2022-42964 via pymatgen (2020.10.20)

pymatgen PYPI version 2020.10.20 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - robocrys 0.2.5 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

dockonsurf (0.0.1), pumml (0.0.2) potentially affected by CVE-2022-42964 via pymatgen (2020.11.11)

pymatgen PYPI version 2020.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - dockonsurf 0.0.1 - pumml 0.0.2 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...

aiida-vasp (>=2.0.0, <=2.1.1) potentially affected by CVE-2022-42964 via pymatgen (2020.12.3)

pymatgen PYPI version 2020.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - aiida-vasp =2.0.0, =2.1.1 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...